Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File: YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier: IWN5hgBD4MCO6b6UX8oZScaJD8WcT+dJmrILSlOjIDo=
Subject key identifier: C1:C4:73:87:4A:A8:39:65:50:7B:8D:57:7E:2A:4D:F9:57:7E:E1:E7
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer: /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial: 0198D5F18DE5A6E0204597917C9BBD03DC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: HKNH5qVY82EVhwf41jFwu0WLXWQ.roa (hash: lq97v+q7hVfTasgsk/QjtVrEG9iM12Kuyq3A6kQDZ7s=)
2: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: oK/DlKJyUaqkp/VcDW3VJCzY/MdFXPzmwBN47Rgw4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8d:e5:a6:e0:20:45:97:91:7c:9b:bd:03:dc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=c1c473874aa83965507b8d577e2a4df9577ee1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:21:8a:9d:bc:08:b1:f3:4e:ad:91:1b:2e:
70:25:30:15:f4:e0:af:ad:44:6d:d4:09:e5:88:f0:
b9:02:cf:71:2b:b4:b9:bf:10:22:60:24:93:c4:fd:
7b:84:73:00:be:93:38:71:6f:52:20:b1:75:26:2a:
11:c9:f1:a6:13:54:86:f1:a3:4d:b1:5f:6b:df:ff:
b8:4c:1c:fa:b8:09:a1:14:b8:e8:5b:71:67:e5:15:
44:dc:e8:ac:b1:06:52:a4:4d:0f:04:78:5a:c5:0c:
7a:49:59:06:e8:1a:c7:7e:1b:6d:4e:33:d6:e0:d3:
c5:e5:ce:c9:91:0f:5f:07:c4:19:c8:b5:f0:df:84:
e9:ad:7d:2f:4a:da:3b:42:88:50:28:40:3e:32:64:
1f:5f:74:9a:ff:5b:3a:56:e8:87:e0:8a:5c:43:6e:
94:bc:70:71:62:8b:92:41:8c:31:85:65:dd:a6:b0:
fc:34:0a:da:b5:e2:92:75:b9:e8:5f:44:2f:e5:a8:
b4:6a:f9:b6:cb:58:33:e5:50:a6:96:e1:a4:ba:b2:
06:9b:6c:ad:d8:6e:3d:2a:87:18:85:a1:7c:98:e0:
01:c9:6c:cf:6d:73:90:45:bd:3a:af:75:52:b5:25:
89:33:0d:7b:fc:ba:90:23:01:1c:dc:c4:41:fe:d3:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:73:87:4A:A8:39:65:50:7B:8D:57:7E:2A:4D:F9:57:7E:E1:E7
X509v3 Authority Key Identifier:
keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0d:f8:3e:1f:49:33:b3:f9:3c:12:98:ed:bc:98:9e:3a:99:
9b:a1:06:56:9e:59:25:6a:64:2b:a7:7f:e2:20:9b:58:ea:f2:
ec:ec:e4:c8:e6:1a:a0:1c:a1:b3:1e:51:95:af:fd:eb:cd:2a:
f9:1a:0d:30:15:74:ab:65:0b:00:4f:01:9a:60:70:17:73:21:
81:eb:88:b3:00:9e:a7:5c:05:26:6c:48:ca:35:44:10:33:28:
ab:b9:d6:7e:f9:46:37:63:89:d1:08:fb:d6:4d:51:61:20:e4:
e1:7d:53:fe:e8:ef:03:c1:ac:82:5d:9b:f9:51:c0:ca:f0:10:
db:4e:36:15:6e:80:27:be:4f:7a:c8:67:bb:92:40:14:7d:b1:
7e:38:a8:87:f2:3e:59:00:ef:f2:2d:e8:a8:97:18:88:80:6f:
97:b7:be:41:46:17:de:04:d9:8e:3b:44:7e:69:b4:5c:aa:34:
25:16:ca:05:ee:b3:b6:d7:52:b2:64:94:d5:be:cc:9f:76:a5:
2b:6a:c9:95:72:16:1c:f6:bc:96:87:b4:d9:30:fb:76:7d:d0:
c8:18:2a:29:c5:d6:14:c2:e8:87:a5:b0:f6:a3:2a:40:03:b0:
74:b5:65:ac:a9:e7:ea:2d:9e:2b:c4:a4:86:fd:af:1e:a5:e0:
9a:c3:49:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Y3lpuAgRZeRfJu9A9wtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYzVmY2U3N2RkZTRlMmVlNGZkNjUzNTEwMDUyOWMyZjQ0
NGQ3OWEwHhcNMjUwODIzMDgwMDM0WhcNMjUwODI0MDgwMDM0WjAzMTEwLwYDVQQD
EyhjMWM0NzM4NzRhYTgzOTY1NTA3YjhkNTc3ZTJhNGRmOTU3N2VlMWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wQhip28CLHzTq2RGy5wJTAV9OCv
rURt1AnliPC5As9xK7S5vxAiYCSTxP17hHMAvpM4cW9SILF1JioRyfGmE1SG8aNN
sV9r3/+4TBz6uAmhFLjoW3Fn5RVE3OissQZSpE0PBHhaxQx6SVkG6BrHfhttTjPW
4NPF5c7JkQ9fB8QZyLXw34TprX0vSto7QohQKEA+MmQfX3Sa/1s6VuiH4IpcQ26U
vHBxYouSQYwxhWXdprD8NArateKSdbnoX0Qv5ai0avm2y1gz5VCmluGkurIGm2yt
2G49KocYhaF8mOAByWzPbXOQRb06r3VStSWJMw17/LqQIwEc3MRB/tN3wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHEc4dKqDllUHuNV34qTflXfuHnMB8GA1UdIwQY
MBaAFGLF/Od93k4u5P1lNRAFKcL0RNeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQt
YWY2YmU5MDU3OTlkLzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wMDNmNzAtMGE4OC00ZmFiLWIzNzQtYWY2YmU5MDU3OTlk
LzEvWXNYODUzM2VUaTdrX1dVMUVBVXB3dlJFMTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQ34Ph9J
M7P5PBKY7byYnjqZm6EGVp5ZJWpkK6d/4iCbWOry7OzkyOYaoByhsx5Rla/9680q
+RoNMBV0q2ULAE8BmmBwF3MhgeuIswCep1wFJmxIyjVEEDMoq7nWfvlGN2OJ0Qj7
1k1RYSDk4X1T/ujvA8Gsgl2b+VHAyvAQ2042FW6AJ75Peshnu5JAFH2xfjioh/I+
WQDv8i3oqJcYiIBvl7e+QUYX3gTZjjtEfmm0XKo0JRbKBe6zttdSsmSU1b7Mn3al
K2rJlXIWHPa8loe02TD7dn3QyBgqKcXWFMLoh6Ww9qMqQAOwdLVlrKnn6i2eK8Sk
hv2vHqXgmsNJsw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:07 2025 by rpki-client